Rockwell Automation Controllogix 5580 vulnerabilities

7 vulnerabilities

Known vulnerabilities in Rockwell Automation Controllogix 5580, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

HighCVE-2025-9166rockwell automation · controllogix 5580 +1 more1y agoRockwell Automation ControlLogix® 5580 V35.013 Denial-Of-ServiceA denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller.EPSS0.43%HighCVE-2022-3752rockwell automation · compact guardlogix 5380 +9 more3y agoRockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service AttackAn unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online and continue normal operation.EPSS1.30%HighCVE-2024-40619rockwell automation · controllogix 5580 +3 more2y agoRockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet HandlingCVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.EPSS0.58%HighCVE-2024-5659rockwell automation · 1756-en4 +11 more2y agoRockwell Automation Multicast Request Causes major nonrecoverable fault on Select ControllersRockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.EPSS0.31%HighCVE-2024-6207rockwell automation · compact guardlogix 5380 sil 2 +15 more2y agorockwell automation compact guardlogix 5380 sil 2CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.EPSS0.55%HighCVE-2024-6077rockwell automation · 1756-en4 +15 more2y agoRockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIPA denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.EPSS0.56%HighCVE-2024-3493rockwell automation · 1756-en4tr +11 more2y agoRockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header ValueA specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.EPSS0.64%